EIP-2026-105904

PRE-CVE

Clever Copy 3.0 - Multiple SQL Injections / Cross-Site Scripting Vulnerabilities

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-105904. PoCs published by hadihadi.

AI-analyzed exploit summary The exploit demonstrates SQL injection and XSS vulnerabilities in Clever Copy 3.0 by providing crafted URLs that extract user credentials and execute arbitrary JavaScript. The SQLi payloads bypass authentication and retrieve sensitive data from the database.

Description

Clever Copy 3.0 - Multiple SQL Injections / Cross-Site Scripting Vulnerabilities

Exploits (1)

exploitdb WORKING POC VERIFIED

by hadihadi · textwebappsphp

https://www.exploit-db.com/exploits/31035

View Code ZIP pw:eip

The exploit demonstrates SQL injection and XSS vulnerabilities in Clever Copy 3.0 by providing crafted URLs that extract user credentials and execute arbitrary JavaScript. The SQLi payloads bypass authentication and retrieve sensitive data from the database.

Classification

Working Poc 90%

Attack Type

Sqli | Xss

Complexity

Trivial

Reliability

Reliable

Target: Clever Copy 3.0

No auth needed

Prerequisites: Access to the target web application

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1059.007 - JavaScript

devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026